漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SVXportal <= 2.5 admin/user_action.php Stored XSS
Vulnerability Description
SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php). User-supplied fields such as Firstname, lastname, and email are stored in the backend database without adequate output encoding and are later rendered in the administrator interface (admin/users.php), allowing an unauthenticated remote attacker to inject arbitrary JavaScript that executes in an administrator's browser upon viewing the affected page.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
SVXportal 安全漏洞
Vulnerability Description
SVXportal是Peter个人开发者的一个门户网站。 SVXportal 2.5及之前版本存在安全漏洞，该漏洞源于用户注册流程中用户输入字段存储时未充分编码，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A